$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: YMStPtr9+ix4nNkQtu5ZDv5d8OK2sshbun4VpAQ2M5c= Subject key identifier: 3C:A1:86:30:B5:0B:BC:6E:2F:A5:43:60:AB:0C:97:85:5D:F1:B3:DC Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 545449CE25B3B2D073D43D21E4EC0803B738EA12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 0204 Signing time: Fri 08 Aug 2025 00:00:46 +0000 Manifest this update: Thu 07 Aug 2025 23:55:46 +0000 Manifest next update: Mon 11 Aug 2025 03:50:46 +0000 Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: L2EmD81aMJH/5FIYqmAaBN4dVwGTSb3agMBVp5kZ0Sc=) 2: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: V2EcIkO4kYBFpWPYm20ffeA6CsN/ntylUWrKYFLFvmg=) 3: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: u8WfQ7ViwC8c62RjjiP6fTb34ki+LT2D/raqeIObUTI=) 4: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: dHpN7ub4KrmBCyTXelnoFJDCLhoYO0X3bUz4MMj77nQ=) 5: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 0BWjl5P155m35iG6z4d5ofVWD1KwIdM4uWlxy+LGQA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:54:49:ce:25:b3:b2:d0:73:d4:3d:21:e4:ec:08:03:b7:38:ea:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Aug 7 23:55:46 2025 GMT Not After : Aug 11 03:50:46 2025 GMT Subject: CN=3CA18630B50BBC6E2FA54360AB0C97855DF1B3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:d3:46:c6:a6:9d:8f:f2:07:b2:ce:fe:3b: 8b:11:f2:61:55:73:e4:34:7e:3d:9c:c4:de:d4:45: 2e:df:d2:d3:5e:cb:de:4d:e9:39:e6:5e:d1:73:56: 42:83:9c:88:63:25:ba:45:a9:ba:02:4f:be:02:c7: 35:04:af:4f:3d:50:05:20:80:bb:39:25:9a:6b:6f: b9:69:9d:90:9f:24:d8:6c:65:13:2b:9e:f1:0b:80: 9d:ad:97:2e:47:7f:1b:fa:75:93:8e:93:26:fb:c5: 69:c7:59:1a:21:6a:ef:bc:b1:04:05:45:e0:ed:1e: 4c:97:66:9a:fa:fd:3a:48:e9:d8:36:e1:9a:5e:07: be:2d:f8:78:93:2b:e1:47:a2:6d:64:a6:37:dc:90: ec:e5:7f:5f:fc:a6:ad:e0:b2:3b:35:a8:c7:b0:37: 02:f1:ef:db:90:1b:35:c9:c9:76:51:3b:f7:be:4a: 21:72:54:b1:40:1d:64:37:43:43:2f:1a:9a:e8:8d: 9a:13:7f:ef:15:c3:4c:3c:e4:01:c5:74:61:64:8c: d1:b7:dd:c1:53:fb:62:8b:85:b5:22:3a:e2:2a:5b: 28:28:80:5f:c3:9b:b4:82:a5:9d:3d:23:7a:8f:88: 2c:bb:de:27:e0:75:b0:07:de:a1:15:00:c6:a0:69: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A1:86:30:B5:0B:BC:6E:2F:A5:43:60:AB:0C:97:85:5D:F1:B3:DC X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:75:18:56:34:a9:66:b3:52:81:1a:1c:f8:61:e8:e5:40:67: 51:b3:6e:13:af:73:08:e0:c2:c0:e9:30:fd:51:03:9d:41:b0: 6a:ac:28:52:6f:54:47:67:50:eb:86:44:2e:9a:01:01:a7:4a: 70:8a:29:c6:10:a9:09:d2:63:ed:96:ce:64:9c:5f:ae:a1:7c: 36:36:56:16:f4:3c:04:5b:f2:3c:1f:dd:06:f4:07:4f:66:f3: 02:94:3e:36:49:dc:f0:e3:84:07:e7:c1:17:87:51:d5:fc:b0: 94:d9:61:33:24:b5:24:2e:5e:fe:63:a3:10:57:30:ea:c2:5c: 74:8e:b5:95:9b:ff:04:5f:c7:51:37:ff:0e:6f:72:15:a0:a8: df:0a:06:d3:a6:d1:f3:0b:de:b8:ce:cf:3d:ab:dd:cd:e5:1b: d9:66:f5:e8:f8:d4:b8:a9:76:f1:73:5d:1b:73:01:89:43:5a: 7c:ba:a9:ea:cd:c1:e6:0c:e5:b7:2d:a2:51:79:81:01:c1:66: 58:b7:3e:2c:77:ea:fb:64:e3:c4:10:1b:b5:b3:3d:5e:f9:bf: 56:89:78:c8:05:f0:cc:6d:af:f8:0c:60:01:e0:d1:5b:56:65: fe:2b:36:60:aa:c1:d8:a9:c8:16:15:a6:ee:73:4e:43:cc:35: 06:66:16:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFRJziWzstBz1D0h5OwIA7c46hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA4MDcyMzU1NDZaFw0yNTA4MTEwMzUwNDZaMDMxMTAvBgNV BAMTKDNDQTE4NjMwQjUwQkJDNkUyRkE1NDM2MEFCMEM5Nzg1NURGMUIzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFNNGxqadj/IHss7+O4sR8mFV c+Q0fj2cxN7URS7f0tNey95N6TnmXtFzVkKDnIhjJbpFqboCT74CxzUEr089UAUg gLs5JZprb7lpnZCfJNhsZRMrnvELgJ2tly5Hfxv6dZOOkyb7xWnHWRohau+8sQQF ReDtHkyXZpr6/TpI6dg24ZpeB74t+HiTK+FHom1kpjfckOzlf1/8pq3gsjs1qMew NwLx79uQGzXJyXZRO/e+SiFyVLFAHWQ3Q0MvGprojZoTf+8Vw0w85AHFdGFkjNG3 3cFT+2KLhbUiOuIqWygogF/Dm7SCpZ09I3qPiCy73ifgdbAH3qEVAMagaZQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPKGGMLULvG4vpUNgqwyXhV3xs9wwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIV1GFY0qWazUoEaHPhh6OVAZ1GzbhOvcwjg wsDpMP1RA51BsGqsKFJvVEdnUOuGRC6aAQGnSnCKKcYQqQnSY+2WzmScX66hfDY2 Vhb0PARb8jwf3Qb0B09m8wKUPjZJ3PDjhAfnwReHUdX8sJTZYTMktSQuXv5joxBX MOrCXHSOtZWb/wRfx1E3/w5vchWgqN8KBtOm0fML3rjOzz2r3c3lG9lm9ej41Lip dvFzXRtzAYlDWny6qerNweYM5bctolF5gQHBZli3Pix36vtk48QQG7WzPV75v1aJ eMgF8Mxtr/gMYAHg0VtWZf4rNmCqwdipyBYVpu5zTkPMNQZmFtw= -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:08 2025 by rpki-client